Blog on Chinese cyber operations, online surveillance, always on the hunt for leaked documents : https://xitter.cf/t.co/VL2r9IVMh2 | https://xitter.cf/t.co/eVXinXmzYd
World
Joined February 2025
- Tweets2K
- Following151
- Followers12.9K
- Likes1.3K
Pinned Tweet
Just as Trump and Xi might be shaking hands today we are delivering deep dive into more data from the company 'ZRON'.
A digital Espionage-as-a-service shop, that hacked US embassy emails, runs big-data analysis operations on national and foreign targets for China's security services. There is a lot of ground to cover, so stay with us and let's go. 1/13
NetAskari retweeted
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number.
More: 404media.co/heres-what-teleg…
Seems like we have a massive home-router vulnerability that can be exploited: "The vulnerability can be triggered remotely over WiFi without knowledge of the network key or completion of a normal WPS enrollment. Exploitation provides controlled information disclosure and arbitrary code execution." quentinkaiser.be/security/20…
NetAskari retweeted
Australia: Alleged Chinese spy posed as recruiter for 'retired Australian police'
abc.net.au/news/2026-10-16/c…
Remember calling it when it was revealed that iPhone11 had a HW flaw that it was already exploited in the wild by for a while by digital forensics companies around the world.
Shanghai Fuhua Network Technology has been building network data flow surveillance and VPN detection systems for a while in China. They are part of the ever growing eco-system of companies that provide network-traffic control tools for government and public institutions. It seems that after years of half-hearted internet control ( also often hampered by technical realities ), Beijing has decided to giving the whole issue another push lately.
If you want to read more on that topic come over to our substack and get some interesting insights into China's cyber operations, domestic and cross border online surveillance and some cyber crime stuff too... : netaskari.substack.com/p/chi…
NetAskari retweeted
Calif’s Chollima jailbreak:
• Kernel r/w, SPTM bypass, sandbox escape
• iOS 27.0.1; demoed on MIE-enabled 17e & 18 Pro
• Unpatched 0-days: Duo could get a day-one untethered jailbreak
• Will get released at some point but no ETA
• Get your 18 Pro/PM on 27.0.1 or buy one now
NetAskari retweeted
Two years ago I released the USB Army Knife, this combined WiFi, BTLE & USB attacks into a single dongle with a unified language.
Two years of long nights later I’m teasing the UAK Pro
More WiFi & BTLE attacks, mic, IR TX, mesh networking and more (see 🧵)
Coming soon!!!
For over a year my free time has been spent turning this ‘LilyGo T-Dongle S3’ into hacking tool USB/WiFi/BT which I’ve named the USB Army Knife.
This device is cheap, tiny, has a screen, SPI port, button and can do a ton of stuff with the ESP32-S3 inside.
It has consumed me! 🧵
ALT Lily go T dongle S3
In the latest documentary form AlJazeera's '101 East' an operator of a scam compound operation in Cambodia, admits that he is running 'internet surveillance'. As his operation seems to be also close to parts of the Chinese security establishment, it would not be surprising if some of the 'cross border surveillance operations' or even politically aimed APT ops might run through those places. Either way, its a great piece of journalism and is worth a watch...
You can watch the documentary 'Exposing an alleged crime kingpin's Cambodian empire' here: youtube.com/watch?app=deskto…
NetAskari retweeted
🚨 BREAKING: Microsoft's October 2026 Patch Tuesday is MASSIVE!
Microsoft has fixed a record-breaking 1,411 security vulnerabilities, including 70 critical flaws and 3 zero-days, one of which is actively exploited in attacks.
🔥 317 remote code execution flaws
⚠️ 677 privilege escalation flaws
🛡️ 40 security feature bypass flaws
💻 Time to get patching!
Again, fantastic work by @billmarczak @jsrailton and all the other folks at @citizenlab : This report exposes zero-click spyware delivered via targeted ads, which we call AdFection, and is the first technical demonstration that mercenary spyware is being distributed via targeted advertisements."citizenlab.ca/research/how-d…
NetAskari retweeted
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads.
A normal-looking ad loads. If you're a target, you're infected. No click needed.
To protect yourself, block ads now.
First time it's been confirmed in the wild. We call it #AdFection.
Candiru spyware infections at @AJEnglish. 45+ devices infected.
Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse.
Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC.
Investigation ongoing 1/
READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : citizenlab.ca/research/how-d…
Confiant's blog: blog.confiant.com/p/adint-we…
On the Chinese market Darksword/Coruna inspired C2 frameworks are still proliferating and people are very motivated to try to expand them past its limitations, but the big 'win' hasn't been achieved yet. Could 'Divine Seagull' be the breakthrough ? Thanks to @Huntio 'attack capture' we got access to its source code. Come over to our blog to read about our little investigation, for free: netaskari.substack.com/p/div…
NetAskari retweeted
A former senior cybersecurity researcher with Microsoft’s Detection and Response Team received a care package of Russian trinkets on his doorstep after investigating Midnight Blizzard 😯: theregister.com/cyber-crime/…
